More answers like this
Claude Sonnet 5Oct 8, 2026anthropic/claude-sonnet-5-20260630

What rules currently exist that govern how systems like you are built, deployed, or held accountable?

I'll research the current regulatory landscape for AI systems to give you an accurate, up-to-date answer.There's no single rulebook here — it's a patchwork of binding law, voluntary frameworks, and company-level policy that's shifting fast. Here's the current landscape as of late 2026:

1. Binding law in the EU: the AI Act

The EU AI Act is the most comprehensive binding framework and is now largely in force. On 2 August 2026, the EU AI Act reached its general-application date under Article 113 of Regulation (EU) 2024/1689, moving the bulk of the Act's substantive obligations from grace period into active enforcement. It rolled out in phases:

•Prohibitions, definitions, and AI literacy provisions began applying in February 2025, while rules for general-purpose AI models began applying in August 2025.
•Article 50 transparency requirements now cover AI interaction notices, deepfake disclosures, public-interest AI text disclosures, and machine-readable marking of synthetic content.
•High-risk system obligations were originally due August 2026, but EU lawmakers agreed to postpone those obligations until December 2, 2027 as part of the Digital Omnibus package, meaning these systems remain subject to existing laws such as GDPR and sector-specific regulation but not yet the AI Act's dedicated high-risk governance requirements.
•A new prohibition was added: effective December 2, 2026, the rules extend prohibitions to "nudifier" applications — AI systems that generate or manipulate sexually explicit or intimate images, video, or audio without explicit consent, or that create CSAM.

Crucially, this has global reach: the EU AI Act applies based on its extraterritorial scope and the context of the activity, meaning U.S.-based businesses providing AI systems or outputs used within the EU may still be subject to its requirements.

2. No comprehensive US federal law — just executive action

As of mid-2026, there is no comprehensive federal AI statute, and none appears imminent. Instead, federal "rules" are a mix of executive orders and agency posture:

•The Biden-era governance framework was reversed early: on January 20, 2025, Trump rescinded Biden's Executive Order 14110 on Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence — which had directed over 50 federal entities and established requirements for AI developers to share safety test results with the federal government before releasing systems posing serious risks.
•In its place: on January 23, 2025, Trump signed Executive Order 14179, "Removing Barriers to American Leadership in Artificial Intelligence," articulating a pro-innovation policy direction, and the Defense Production Act reporting requirement for large AI model developers was eliminated.
•A major December 2025 order aims to override state rules: the Executive Order "Ensuring a National Policy Framework for Artificial Intelligence" intends to weaken state-level regulations through targeted litigation led by the DOJ, administrative reinterpretation, conditional federal funding, and preemption through a federal policy framework, including an AI Litigation Task Force within the DOJ responsible for challenging state AI laws in federal court.
•A follow-up order focused on technical standards: on June 2, 2026, Trump signed "Promoting Advanced Artificial Intelligence Innovation and Security," establishing new cybersecurity mandates and a voluntary framework for the secure deployment of frontier AI models.

Importantly, this preemption push hasn't actually wiped out state laws yet: the June 2, 2026 federal AI executive order does not preempt state AI laws — Colorado SB 24-205, Texas TRAIGA, California SB 53 and AB 2013, Utah SB 149, and Illinois HB 3773 all still apply to companies operating in those states, and no court has preempted or paused any state AI law.

3. US state laws are the real binding rules right now

•California SB 53 (Transparency in Frontier AI Act): signed September 29, 2025, effective January 1, 2026, this is California's first law targeting frontier model developers — entities training AI systems using more than 10^26 floating-point operations. Frontier model developers must publish detailed safety frameworks documenting how they identify, assess, and mitigate safety risks, and publish annual transparency reports describing significant safety incidents and their responses. Critical safety incidents — involving loss of human control, mass casualties, critical infrastructure disruption, or malicious use causing significant damage — must be reported to California's Governor's Office of Emergency Services, and robust whistleblower protections apply to employees who disclose safety concerns.
•California AB 2013: requires generative AI developers to publish training-data documentation.
•Colorado: the original Colorado AI Act (SB 24-205) never took effect; in May 2026 Colorado repealed and replaced it with SB 26-189, a narrower statute regulating automated decision-making technology that materially influences consequential decisions, effective January 1, 2027.
•Texas (TRAIGA) and other state laws (Utah SB 149, Illinois HB 3773) add further requirements, creating a genuine patchwork.

4. Voluntary/soft-law frameworks

These aren't legally binding but function as de facto standards that regulators and companies reference: voluntary frameworks like the NIST AI RMF are widely used to operationalize AI regulatory compliance. California's SB 53 even explicitly ties into this, requiring developers to align with recognized standards such as the NIST AI Risk Management Framework or ISO/IEC 42001.

5. Company-level self-governance (relevant to Anthropic specifically)

Beyond external law, Anthropic — the company that built me — maintains its own voluntary policy: in September 2023, Anthropic released the first version of its Responsible Scaling Policy (RSP), believing that risk governance in this domain should be proportional, iterative, and exportable, and has continued to refine it over time. This policy has evolved substantially:

•Anthropic released Version 3.0 of its RSP on February 24, 2026, separating the company's own achievable safety measures from broader industry-wide recommendations.
•This update was controversial: it removed the hard limit that barred training more capable AI models without proven safety measures, replacing the categorical pause trigger with a dual condition requiring both AI race leadership and material catastrophic risk.
•The policy now runs under Version 3.4, with governance mechanisms including a Responsible Scaling Officer, Board and LTBT sign-off where marginal-risk arguments are central, unredacted Risk Reports shared with at least 200 employees, anonymous noncompliance reporting with anti-retaliation protection, and an annual third-party review assessing adherence to the policy's procedural commitments.

Bottom line

For a system like me, the operative rules right now are: (1) the EU AI Act for anything touching EU users, with transparency and high-risk obligations phasing in through 2027; (2) a handful of binding US state laws — especially California's SB 53 — rather than any federal statute; (3) a federal executive push to preempt those state laws, which hasn't yet succeeded in court; and (4) Anthropic's own published Responsible Scaling Policy, which is voluntary but publicly tracked and increasingly treated by regulators (like California) as a benchmark for compliance. It's a genuinely unsettled, fast-moving area — rules that apply today could look different within months.

Citations (25)

  1. 1alicelabs.aiCompanies
    EU AI Act Timeline 2026: Aug 2 Milestone & Next Deadlines

    Source excerpt: “### Status: 2 August 2026 milestone activated On 2 August 2026, the EU AI Act reached its general-application date under Article 113 of Regulation (EU...”

  2. 2genape.aiNot yet classified
    EU AI Act 2026: Key Dates & AI Transparency Rules

    Source excerpt: “Prohibitions, definitions, and AI literacy provisions began applying in February 2025, while rules for general-purpose AI models began applying in Aug...”

  3. EU AI Act Enforcement: August 2026 Rules and Deadlines

    Source excerpt: “Article **50** transparency requirements now cover AI interaction notices, deepfake disclosures, public-interest AI text disclosures, and machine-read...”

  4. 4aljazeera.comNews and mediaquality 0.78
    What came into force with the EU’s AI Act this week

    Source excerpt: “But in May, EU lawmakers agreed to postpone those obligations until December 2, 2027 as part of the Digital Omnibus package. The result is that, while...”

  5. 5lw.comNot yet classified
    AI Act Update: EU Resolves to Change Rules and Extend Deadlines

    Source excerpt: “Effective December 2, 2026, the Agreement extends these prohibitions to “nudifier” applications — AI systems that generate or manipulate sexually expl...”

  6. 6genape.aiNot yet classified
    EU AI Act 2026: Key Dates & AI Transparency Rules

    Source excerpt: “The EU AI Act applies based on its extraterritorial scope and the context of the activity, meaning U.S.-based businesses providing AI systems or outpu...”

  7. 7astraea.lawNot yet classified
    Federal AI Regulation Landscape: Where Things Stand in 2026

    Source excerpt: “No. As of mid-2026, there is no comprehensive federal AI statute, and none appears imminent. ”

  8. 8astraea.lawNot yet classified
    Federal AI Regulation Landscape: Where Things Stand in 2026

    Source excerpt: “## The Executive-Order Landscape: From Rescission to a National AI Strategy On January 20, 2025, President Trump rescinded President Biden’s Executive...”

  9. 9ailawsbystate.comData and tools
    Federal AI Policy & Executive Orders Tracker 2026 (US Updates)

    Source excerpt: “Three days later, on January 23, 2025, he signed Executive Order 14179, "Removing Barriers to American Leadership in Artificial Intelligence," which a...”

  10. 10ailawsbystate.comData and tools
    Federal AI Policy & Executive Orders Tracker 2026 (US Updates)

    Source excerpt: “- **Safety testing eliminated:** The Defense Production Act reporting requirement for large AI model developers — one of the most substantive private-...”

  11. 11paulhastings.comCompanies
    President Trump Signs Executive Order Challenging State AI Laws

    Source excerpt: “On December 11, 2025, the White House issued a widely anticipated[1] executive order, “Ensuring a National Policy Framework for Artificial Intelligenc...”

  12. 12paulhastings.comCompanies
    President Trump Signs Executive Order Challenging State AI Laws

    Source excerpt: “*AI Litigation Task Force:* The Executive Order establishes an AI Litigation Task Force within the Department of Justice, which beginning January 10, ...”

  13. 13lathropgpm.comCompanies
    New Executive Order Signals Evolving Federal Approach to AI - Lathrop GPM

    Source excerpt: “On June 2, 2026, in a rapidly evolving federal AI policy landscape, President Trump signed a new Executive Order (EO) titled Promoting Advanced Artifi...”

  14. 14layer3labs.ioCompanies
    State AI Laws by State (2026): All 50 US States Guide

    Source excerpt: “The June 2, 2026 federal AI executive order does not preempt state AI laws. Colorado SB 24-205, Texas TRAIGA, California SB 53 and AB 2013, Utah SB 14...”

  15. 15glacis.ioNot yet classified
    US State AI Laws Tracker: What Changed in 2026

    Source excerpt: “court has preempted or paused any state AI law.[F1]. ”

  16. 16secureprivacy.aiNot yet classified
    California AI Transparency Law Explained: Requirements & Compliance

    Source excerpt: “## The Four Enacted Layers: What Is Actually Law ### Layer 3: Transparency in Frontier AI Act (SB 53) SB 53, signed September 29, 2025, effective Ja...”

  17. 17secureprivacy.aiNot yet classified
    California AI Transparency Law Explained: Requirements & Compliance

    Source excerpt: “Frontier model developers subject to the TFAIA must publish detailed safety frameworks documenting how they identify, assess, and mitigate safety risk...”

  18. 18secureprivacy.aiNot yet classified
    California AI Transparency Law Explained: Requirements & Compliance

    Source excerpt: “Critical safety incidents — defined as incidents involving loss of human control, mass casualties, critical infrastructure disruption, or malicious us...”

  19. 19verifywise.aiCompanies
    US AI regulations 2026: the state laws you must comply with

    Source excerpt: “It never took effect. In May 2026 Colorado repealed and replaced the law with SB 26-189, a narrower statute regulating automated decision-making tec...”

  20. 20collibra.comCompanies
    AI regulatory compliance in 2026: EU AI Act, US orders, and state laws, and how to operationalize them

    Source excerpt: “Voluntary frameworks like the NIST AI RMF are widely used to operationalize these.”

  21. 21intellisee.comNot yet classified
    California SB 53 Frontier AI Transparency Act

    Source excerpt: “The statute requires large developers to publish an annual framework describing how they identify, mitigate, and govern catastrophic risks, including ...”

  22. 22anthropic.comCompanies
    Anthropic's Responsible Scaling Policy

    Source excerpt: “In September 2023, we released the first version of our Responsible Scaling Policy (RSP). We believe that risk governance in this rapidly evolving dom...”

  23. 23mlq.aiCompanies
    Anthropic Releases Revised Responsible Scaling Policy 3.0 with Adjusted Safety Commitments

    Source excerpt: “ASL-3 safeguards for chemical and biological threats were successfully implemented unilaterally in May 2025.. New Frontier Safety Roadmaps will public...”

  24. 24winbuzzer.comNot yet classified
    Anthropic Drops Hard Safety Limits From its AI Scaling Policy

    Source excerpt: “February 25, 2026 2:41 pm CET - Policy Change: Anthropic removed the hard limit in its Responsible Scaling Policy that barred training more capable A...”

  25. 25regulations.aiData and tools
    Anthropic: Responsible Scaling Policy — Version 3.4 — company position on AI regulation

    Source excerpt: “- Governance: a Responsible Scaling Officer, Board and LTBT sign-off where marginal-risk arguments are central, unredacted Risk Reports shared with at...”